Subprocessors

This page is a translation; the French version is authoritative.

Version of 19 October 2026.

To provide Escouade online, the Publisher, Ghislain Levrat, sole trader, uses the subprocessors below, each for the stated function only. This list forms part of the data processing agreement: any addition or replacement is announced at least one month in advance, by email to administrators and on this page. In Escouade hub, installed on a company’s own server, this list does not apply: the company chooses its providers.

The subprocessors

Scaleway SAS, 8 rue de la Ville l’Évêque, 75008 Paris, France. The dedicated server that runs the website, the account and the workspaces, in France; object storage for the documents of paid workspaces, in Paris; sending service emails, such as sign-in codes; and the AI models of Generative APIs, in Paris: Mistral Small 3.2 and Mistral Medium 3.5 for chat and analysis, DeepSeek V4 Flash for Meet’s meeting minutes, Whisper Large v3 for transcription, as well as DeepSeek V4 Flash and gpt-oss-120b for the chat, if the organisation chooses them. Scaleway keeps neither the models’ requests nor their responses, except, for up to two weeks, the content of a request linked to malicious activity or to an incident to be fixed, and trains no model with them. Processing in the European Union.

Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, United States. The domain name, encryption and protection of escouade.io and compte.escouade.io: Cloudflare sees the requests, the IP addresses and what is entered in the pages it protects. Transfers to the United States governed by the EU–US Data Privacy Framework and the standard contractual clauses of its data processing agreement.

Recall.ai (Hyperdoc Inc.), San Francisco, United States, in its European region, in Frankfurt. For Escouade Meet: the bot that joins, records and transcribes meetings held on other vendors’ video-conferencing platforms. It receives the audio, the participants’ display names and the transcript. Each meeting’s copy is deleted at Recall once it has been brought back to the Publisher’s server, at most seven days after the meeting. Recall trains no model with this data. Transfers governed by the standard contractual clauses of its data processing agreement.

Deepgram, Inc., San Francisco, United States, through its European endpoint, whose requests are not routed outside the Union. For Escouade Meet: live transcription and the transcription of audio files sent from the phone. Every request opts out of its model improvement programme: Deepgram then keeps the audio and the transcript only for the duration of the request. Transfers governed by the standard contractual clauses.

Eleven Labs Inc., New York, United States. The chat’s voice mode, when the organisation enables it: the user’s voice, for the duration of the conversation, transcribed and then read aloud. The voice agent is set to keep neither the voice recording nor the conversation. Processing in the United States, governed by the standard contractual clauses and the EU–US Data Privacy Framework of its data processing agreement.

Apple and Google. Apple’s notification service and Google’s Firebase Cloud Messaging deliver the mobile apps’ notifications, when the organisation enables them. Their text only states the kind and severity of an alert, never the title of a document, an address or a name.

Planned, not yet in service

Mistral AI, 15 rue des Halles, 75001 Paris, France. The chat’s Standard level, Mistral Large, through the European endpoint of its API, with the use of data to improve its models opted out. It is not connected yet: the chat’s four levels run at Scaleway today. Its start of service will be announced here one month in advance.

Public services consulted

At sign-up, the government Recherche d’entreprises API receives the name or SIREN number searched for, never the person searching. To place an address on the map, the server queries Nominatim, the OpenStreetMap Foundation’s service, in the United Kingdom, a country recognised by the European Commission as offering an adequate level of protection: it receives the address entered, without the user’s IP address or cookies.

What is not a subprocessor of the Publisher

Mollie B.V., in the Netherlands, collects payments on its own behalf, as a controller, under its own terms. The services the organisation connects itself, its Gmail or Outlook mailbox, its calendars, its electronic signature, the Claude or ChatGPT it links through the MCP, its social network accounts, are its own providers: Escouade exchanges data with them on its instruction. The website’s audience measurement is described in the privacy policy.

AI models outside Europe

In Escouade online, no model is called in China, and none is called outside Europe by default. DeepSeek V4 Flash and gpt-oss-120b are only served by Scaleway, in Paris: DeepSeek V4 Flash writes Meet’s meeting minutes, and both only answer the chat if the organisation chooses them.